A frequent bug that keeps reappearing in web servers is through appending ".." to path names in order to access other files on the server
